Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 22:18:36 +0000 CVE-2026-80193 — Kimai before 2.62.0 Authorization Bypass via QuickEntry https://vulnerability.circl.lu/vuln/cve-2026-80193 <p><strong>Affected:</strong> kimai</p> <p>Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller when creating new timesheets. Authenticated users with view_other_timesheet and edit_other_timesheet permissions can create timesheet records for team members by submitting the QuickEntry form, bypassing authorization checks enforced elsewhere.</p> <p><strong>Affected:</strong> kimai</p> <p>Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller when creating new timesheets. Authenticated users with view_other_timesheet and edit_other_timesheet permissions can create timesheet records for team members by submitting the QuickEntry form, bypassing authorization checks enforced elsewhere.</p> https://vulnerability.circl.lu/vuln/cve-2026-80193